$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: LuRhX8fVSEiCGXWIfqAbjPQ1JcIoEEAXNkl20o6LDEA= Subject key identifier: 0E:FE:E9:7D:9C:35:D5:54:4F:21:39:E8:D3:78:7C:CA:F4:FB:7A:FA Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019CAA8FE5FD5CB1424CD2A9003100DD871D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 0B9F Signing time: Sun 01 Mar 2026 18:01:22 +0000 Manifest this update: Sun 01 Mar 2026 18:01:22 +0000 Manifest next update: Mon 02 Mar 2026 18:01:22 +0000 Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=) 2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=) 3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=) 4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=) 5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=) 6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=) 7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=) 8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=) 9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=) 10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=) 11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=) 12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=) 13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=) 14: RvoB02LV3HAYyjSpTynuepFZgZQ.roa (hash: IJ1ixOVD+h2rJ9Dsin8DqExrSUj/mMAvMHLaqQwlHdg=) 15: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: XOLB5UIkQ64q5MqzszrsxiHWoLXuojtwaHlvr1vXMr8=) 16: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=) 17: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=) 18: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=) 19: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=) 20: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=) 21: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:8f:e5:fd:5c:b1:42:4c:d2:a9:00:31:00:dd:87:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Mar 1 18:01:22 2026 GMT Not After : Mar 2 18:01:22 2026 GMT Subject: CN=0efee97d9c35d5544f2139e8d3787ccaf4fb7afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:50:ba:e2:e0:ab:f9:eb:39:bf:96:da:ff: b4:2f:ec:18:35:46:a8:91:24:b7:37:86:0d:da:b4: 31:42:df:27:12:15:67:1c:ee:80:6e:60:a2:6f:93: c1:cd:db:80:1a:6f:e7:2a:f4:a2:ae:64:1c:fc:6d: 84:e1:8a:44:a5:87:ec:c7:a0:bd:8d:9d:da:79:62: 87:c7:a1:5e:22:63:34:86:11:18:74:45:a3:7e:91: ce:1d:b0:02:1b:43:86:71:ef:a6:8b:b6:f7:e1:38: 02:c6:95:1a:2f:3b:64:4e:51:22:a7:73:7f:4e:da: 14:9c:7c:8a:fb:eb:9f:6b:f8:5b:f5:12:34:92:70: 61:b1:c8:05:49:5b:86:b9:6c:95:3f:3d:19:15:55: 62:cc:b9:37:94:ed:5f:91:12:17:cf:34:f2:97:24: a3:a9:70:db:df:51:5d:1f:63:37:a9:da:17:16:5d: 36:3a:a3:68:74:ef:c7:63:15:ef:80:d5:f5:71:4d: cf:92:c8:78:e5:be:2d:6b:18:13:05:ba:52:a1:12: fa:6b:71:7e:e4:7f:ee:83:11:54:7a:42:88:07:71: 3f:ff:be:ea:3e:d9:31:a8:d2:23:a0:e3:9e:0d:bd: 09:d4:69:71:b4:30:28:e4:0f:34:8a:4d:56:bd:49: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FE:E9:7D:9C:35:D5:54:4F:21:39:E8:D3:78:7C:CA:F4:FB:7A:FA X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7e:fb:41:9c:1a:e9:01:ee:d0:3c:ba:22:2b:a3:db:d7:b4: a7:78:8c:65:34:7a:05:12:75:e4:f0:36:0d:d2:cb:54:d2:2f: 5d:8d:58:db:1b:bf:62:c4:32:20:57:c4:75:61:2f:a1:56:8d: f2:8b:96:02:6c:10:69:c9:18:90:a3:01:06:77:fb:ba:a7:25: 4f:cf:f3:a6:5e:e4:ca:b2:c2:bd:04:2a:f5:63:06:b3:06:a0: 41:eb:61:ca:89:73:b1:ed:a1:f7:a4:d4:8e:1c:bb:06:b6:45: e4:f1:7c:0f:85:4c:2d:06:6b:dc:c5:34:ff:cb:de:27:0a:79: ab:50:04:b2:15:d7:64:84:7f:32:85:18:e2:24:57:66:5f:47: fe:d1:82:6a:aa:2b:10:9c:f5:ed:c5:8b:db:51:10:ca:8e:4a: 1f:a1:e7:c7:1e:3a:bf:d4:a1:43:1d:7d:19:4c:b6:62:60:c5: 37:74:b9:41:b3:17:23:91:96:a4:65:57:d2:60:6c:8a:78:af: cd:fc:33:ee:bc:a9:5c:0a:99:75:21:9c:13:5a:9f:7a:8b:80: 88:5e:06:1b:24:ef:22:d7:77:8d:04:5d:90:31:29:92:79:0c: 70:9a:f5:8f:7b:21:24:43:ad:fc:b9:4a:cf:08:ee:8b:b6:12: 87:d4:f0:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqj+X9XLFCTNKpADEA3YcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMzAxMTgwMTIyWhcNMjYwMzAyMTgwMTIyWjAzMTEwLwYDVQQD EygwZWZlZTk3ZDljMzVkNTU0NGYyMTM5ZThkMzc4N2NjYWY0ZmI3YWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YNQuuLgq/nrOb+W2v+0L+wYNUao kSS3N4YN2rQxQt8nEhVnHO6AbmCib5PBzduAGm/nKvSirmQc/G2E4YpEpYfsx6C9 jZ3aeWKHx6FeImM0hhEYdEWjfpHOHbACG0OGce+mi7b34TgCxpUaLztkTlEip3N/ TtoUnHyK++ufa/hb9RI0knBhscgFSVuGuWyVPz0ZFVVizLk3lO1fkRIXzzTylySj qXDb31FdH2M3qdoXFl02OqNodO/HYxXvgNX1cU3Pksh45b4taxgTBbpSoRL6a3F+ 5H/ugxFUekKIB3E//77qPtkxqNIjoOOeDb0J1GlxtDAo5A80ik1WvUmQ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7+6X2cNdVUTyE56NN4fMr0+3r6MB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAX77QZwa 6QHu0Dy6Iiuj29e0p3iMZTR6BRJ15PA2DdLLVNIvXY1Y2xu/YsQyIFfEdWEvoVaN 8ouWAmwQackYkKMBBnf7uqclT8/zpl7kyrLCvQQq9WMGswagQethyolzse2h96TU jhy7BrZF5PF8D4VMLQZr3MU0/8veJwp5q1AEshXXZIR/MoUY4iRXZl9H/tGCaqor EJz17cWL21EQyo5KH6Hnxx46v9ShQx19GUy2YmDFN3S5QbMXI5GWpGVX0mBsiniv zfwz7rypXAqZdSGcE1qfeouAiF4GGyTvItd3jQRdkDEpknkMcJr1j3shJEOt/LlK zwjui7YSh9TwHA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:14 2026 by rpki-client